tini: add patches for minimal cmake version "2.8.12...3.10"

This change adds backport patches from upstream  to increase the minimal required cmake version from "2.8.0" to "2.8.12...3.10".

Signed-off-by: Albrecht Lohofener <[email protected]>

libextractor: fix compilation with gcc15

GNU_LIBRARY is needed for a proper declaration of getopt.

Signed-off-by: Rosen Penev <[email protected]>

luajit2: update to v2.1-20251030

For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20251030

Signed-off-by: Javier Marcet <[email protected]>

luajit2: update to v2.1-20250826

For changes, see tagged commit:
https://github.com/openresty/luajit2/releases/tag/v2.1-20250826

Signed-off-by: Javier Marcet <[email protected]>

protobuf: add cmake 4.x compatibility, remove maintainer

Add a patch for cmake 4.x compatibility.
Remove maintainer who has not been active for several years.

Signed-off-by: Hannu Nyman <[email protected]>

mosquitto: upgrade to version 2.0.22

Upgrade to version 2.0.22, which is compatible with cmake 4.x
 * backport a post-release fix for nossl build

Signed-off-by: Hannu Nyman <[email protected]>

libwebsockets: bump to version 4.4.1

Update to version 4.4.1 to provide compatibility with cmake 4.x

Signed-off-by: Albrecht Lohofener <[email protected]>
[commit message edited]
Signed-off-by: Hannu Nyman <[email protected]>

qrencode: cmake minimum required version to 3.10

- bump to r2 to adjust cmake minimum required version to 3.10

Link: openwrt#27607
Link: openwrt/openwrt@1b48ebd

Signed-off-by: Andrea Pesaresi <[email protected]>

libvorbis: require cmake >= 3.10 due to removed legacy support

Link: https://github.com/openwrt/packages/issues/27607
Link: https://github.com/openwrt/openwrt/commit/1b48ebd31c28f5b2ad3f964c25f34d33badbb979
Signed-off-by: Marcin Maj <[email protected]>

check-autorelease-deprecation: drop workflow

Drop the workflow since the setting has been deprecated over three years
ago.

Link: https://github.com/openwrt/packages/pull/27799#issuecomment-3506689211
Signed-off-by: George Sapkin <[email protected]>

libid3tag: require cmake >= 3.10 due to removed legacy support

Link: https://github.com/openwrt/packages/issues/27607
Link: https://github.com/openwrt/openwrt/commit/1b48ebd31c28f5b2ad3f964c25f34d33badbb979
Signed-off-by: Marcin Maj <[email protected]>

golang: bump to 1.25.4

go1.25.4 (released 2025-11-05) includes fixes to the compiler, the
runtime, and the crypto/subtle, encoding/pem, net/url, and os packages.

Link: https://github.com/golang/go/issues?q=milestone%3AGo1.25.4+label%3ACherryPickApproved
Signed-off-by: George Sapkin <[email protected]>

python3: add libatomic as dependency

For some architectures (like mips24) this solves some build errors.

Signed-off-by: Alexandru Ardelean <[email protected]>

django: bump to version 5.2.8

Because the old one needs an older version of setuptools, than the
one we currently have.

Signed-off-by: Alexandru Ardelean <[email protected]>

python-installer: patch behavior for when script file exists

This seems to happen when re-triggering a build.
The destination path is already there, so this exception gets raised.

Another approach is to do 'make package/<python-package>/clean' and
re-trigger the build.
But that becomes annoying.

Signed-off-by: Alexandru Ardelean <[email protected]>

python-asgiref: add use python-setuptools/host for pkg build

Newer versions of Python no longer ship setuptools.
We need to use the one from the packages feed instead.

Signed-off-by: Alexandru Ardelean <[email protected]>

python3: bump to version 3.13.9

Explicitly disable readline and tkinter modules for host-build.
Host-build will not build if these fail.
  - readline isn't a hard requirement for host-python; some minor lack of
    functionality would be felt, but nothing terrible
  - tkinter is also disabled on the target; but for the host-python we
    don't need it either

Dropped patch: 010-no-ncursesw.patch
  - Since we're disabling readline in the host build

Drop setuptools from python3 - the only reason we kept it there, was
because it was required by pip; pip is still there and seems to install and
work fine without setuptools. There's also a separate setuptools package in
openwrt anyway:
  https://github.com/openwrt/packages/tree/master/lang/python/python-setuptools
Also, Python no longer installs it:
  https://github.com/python/cpython/issues/95299

Drop python3-cgi - https://github.com/python/cpython/commit/08d592389603500af398d278af4842cff6f22c33
Drop distutils - https://github.com/python/cpython/commit/0faa0ba240e815614e5a2900e48007acac41b214
Drop lib2to3 - https://github.com/python/cpython/commit/ae00b810d1d3ad7f1f7e226b02ece37c986330e7

Drop patch: 0001-Adjust-library-header-paths-for-cross-compilation.patch
  - A lot of stuff has changed regarding cross-compilation; at this point
    it's unclear what we need moving forward.

Drop patch: 006-do-not-add-multiarch-local-paths.patch
  - setup.py went away, so no idea if this is needed anymore

Re-applied: 003-do-not-run-compileall.patch

Drop: 008-distutils-use-python-sysroot.patch
  - Buildroot seems to have also dropped this; this patch is from them

Added: 09-don-t-run-profile-task-during-cross-build.patch
  - For cross_compilation, running the profile-task will not work, it also
    mentions this in a comment, but nobody dared to patch it yet (at least
    in this release (3.13.9)

Re-applied: 026-openssl-feature-flags.patch
  - This could have been dropped completely, but upstream decided to keep
    scrypt on by default; for host-build this fails, because OpenWrt keeps
    libressl

Drop patch: 100-gh-95855-Refactor-platform-triplet-detection-code-GH-107221.patch
  - This was a backport; it probably should have been removed sooner

Signed-off-by: Alexandru Ardelean <[email protected]>
wip

python-setuptools: add host-build

Newer Python 3 versions don't ship setuptools anymore.
Packages will need to use this one instead.

Signed-off-by: Alexandru Ardelean <[email protected]>

cloudflared: fix argument order for tunnel command

Move all global options (--protocol, --loglevel, --logfile, --config,
--origincert, etc.) before the 'run' subcommand, and keep --token
after it to match the correct cloudflared CLI syntax.

Signed-off-by: Akihiro Nagai <[email protected]>

xxhash: update to 0.8.3

Fixed compatibility with cmake 4.0
Release notes: https://github.com/Cyan4973/xxHash/releases/tag/v0.8.3

Signed-off-by: Ivan Pavlov <[email protected]>

snort3: update to 3.9.7.0

Changelog: https://github.com/snort3/snort3/releases/tag/3.9.7.0

% snort --version

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.9.7.0
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 3.0.22
           Using Vectorscan version 5.4.12 2025-11-02
           Using libpcap version 1.10.5 (with TPACKET_V3)
           Using LuaJIT version 2.1.0-beta3
           Using LZMA version 5.8.1
           Using OpenSSL 3.5.4 30 Sep 2025
           Using PCRE2 version 10.46 2025-08-27
           Using ZLIB version 1.3.1

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

libdaq3: update to 3.0.22

Changelog: https://github.com/snort3/libdaq/releases/tag/v3.0.22

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <[email protected]>

mstflint: update to 4.34.0

This commit updates the mstflint package
to the latest 4.34.0 release.

Signed-off-by: Til Kaiser <[email protected]>

travelmate: update 2.2.1-5

- fix a cornercase issue in the scanning function with hidden uplinks

Signed-off-by: Dirk Brenken <[email protected]>

tailscale: update to 1.90.6

Changelog: https://tailscale.com/changelog#2025-10-27
Changelog: https://tailscale.com/changelog#2025-10-28
Changelog: https://tailscale.com/changelog#2025-10-30
Changelog: https://tailscale.com/changelog#2025-10-31

Signed-off-by: Sandro Jäckel <[email protected]>

travelmate: update 2.2.1-4

- fix a possible race condition in the scan function
- limit the max. signal strength to 100
- cosmetics

Signed-off-by: Dirk Brenken <[email protected]>

libfmt: bump to 12.1.0

Changelog: https://github.com/fmtlib/fmt/releases/tag/12.1.0

Signed-off-by: Othmar Truniger <[email protected]>

libtiff: update to 4.7.1

Fixes CMake build error.
Also update URL.

Release info: https://gitlab.com/libtiff/libtiff/-/releases/v4.7.1

Signed-off-by: Anari Jalakas <[email protected]>

uacme: bump to 1.7.6

Changelog: https://github.com/ndilieto/uacme/blob/master/ChangeLog

2024-12-29 Nicola Di Lieto <[email protected]>
* Release 1.7.6
- Fix OpenSSL 3.x deprecated APIs
- Fix cross compilation
- uacme: Add environment variables
- uacme: Add support for ACME Renewal Information (ARI)
- uacme: Try obtaining new Reply-Nonce if server doesn't supply one
- uacme: Add hook environment variables
- uacme: Allow matching alternative chain by Authority Key Id
- Documentation update
- Add link to linode api hook

2024-01-28 Nicola Di Lieto <[email protected]>
* Release 1.7.5
- fix ualpn exit code in client mode
- fix build with autoconf version 2.71
- uacme: nsupdate.sh overhaul and DNAME redirection support
- add link to deSEC.io DNS integration
- minor documentation changes including copyright year

Signed-off-by: Goetz Goerisch <[email protected]>

hev-socks5-tunnel: update to 2.14.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tunnel/releases/tag/2.14.0

Signed-off-by: Ray Wang <[email protected]>

hev-socks5-tproxy: update to 2.10.0

Upstream changelog:
https://github.com/heiher/hev-socks5-tproxy/releases/tag/2.10.0

Signed-off-by: Ray Wang <[email protected]>

hev-socks5-server: update to 2.11.0

Upstream changelog:
https://github.com/heiher/hev-socks5-server/releases/tag/2.11.0

Signed-off-by: Ray Wang <[email protected]>

sqlite3: bump to 3.51.0

Changelog: https://sqlite.org/releaselog/3_51_0.html
Signed-off-by: George Sapkin <[email protected]>

libftdi1: require cmake >= 3.10 due to removed legacy support

Link: https://github.com/openwrt/packages/issues/27607
Link: https://github.com/openwrt/openwrt/commit/1b48ebd31c28f5b2ad3f964c25f34d33badbb979
Signed-off-by: Mark Mentovai <[email protected]>

cloudflared: improve init script for tunnel management

Resolved conflict between remotely-managed tunnel and locally-managed
tunnel configurations.

- Bumped PKG_RELEASE to 2
- Commented out 'config' and 'origincert' options in default
  configuration file
- Preserved options as comments for user reference

Signed-off-by: Akihiro Nagai <[email protected]>

openwisp-monitoring: upgrade to 0.3.0

Upgraded openwisp-monitoring package to 0.3.0

Signed-off-by: Gagan Deep <[email protected]>

afalg_engine: bump to v1.2.2

This allows building with CMake 4.0.

Silence the warning about deprecated declarations, as it is inevitable,
since the whole engine system is deprecated.

Signed-off-by: Eneas U de Queiroz <[email protected]>

openwisp-config: upgrade to 1.2.0

Upgrades openwisp-config package to 1.2.0

Signed-off-by: Gagan Deep <[email protected]>

syncthing: bump to 2.0.11

Changelog: https://github.com/syncthing/syncthing/releases/tag/v2.0.11
Signed-off-by: George Sapkin <[email protected]>

cloudflared: Update to 2025.10.1

Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.10.1

Signed-off-by: Tianling Shen <[email protected]>

php8-pecl-http: update to 4.3.1

- support for newer curl versions
- GCC 15 compatibility
- PHP 8.5 compatibility

Signed-off-by: Michael Heimpold <[email protected]>

php8-pecl-xdebug: update to 3.4.7

This fixes varios bugs, e.g. memory leaks, segfaults and
other issues since 3.4.1.
For full changelog see:
https://pecl.php.net/package-changelog.php?package=xdebug&release=3.4.7

Signed-off-by: Michael Heimpold <[email protected]>

earlyoom: add new package

earlyoom checks the amount of available memory and swap at an adaptive
rate for up to 10 times per second. When both available memory and swap
are below threshold, it'll send SIGTERM or SIGKILL to the process with
the highest oom_score. Details about oom_score can be obtained at
https://man7.org/linux/man-pages/man5/proc_pid_oom_score.5.html

Signed-off-by: Alice H. <[email protected]>

sing-box: update to 1.12.12

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.12

Signed-off-by: Anton P. <[email protected]>

fish: fix compilation with mips64

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>

strongswan: add build dependency for python and explicitly use python3

Before:
checking for python... /myworkingdir/build/staging_dir/host/bin/python
checking for python version... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python platform... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python extension module directory (pyexecdir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.

After:
checking for python version... 3.11
checking for python platform... darwin
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... ${PYTHON_PREFIX}/lib/python3.11/site-packages
checking for python extension module directory (pyexecdir)... ${PYTHON_EXEC_PREFIX}/lib/python3.11/site-packages

Signed-off-by: Josef Schlehofer <[email protected]>

adguardhome: refactor config loading and migration

Rename config options and remove unused ones.

Signed-off-by: George Sapkin <[email protected]>

syncthing: fix maxprocs config option name

Map old config option "macprocs" to new one.

Signed-off-by: George Sapkin <[email protected]>

syncthing: improve argument handling readability

Remove reduntant checks when making directories.

Signed-off-by: George Sapkin <[email protected]>

telegraf: use uci-defaults for config generation

use uci-defaults to generate default config to improve maintanability

Signed-off-by: Niklas Thorild <[email protected]>

telegraf: don't call Build/Prepare/Default

don't call Build/Prepare/Default since it serves no purpose

Signed-off-by: Niklas Thorild <[email protected]>

telegraf: update to 1.36.3

- Update Telegraf to v1.36.3

Signed-off-by: Niklas Thorild <[email protected]>

bigclown-gateway: backport pending patch to fix JSON dumps

Pull request:
https://redirect.github.com/hardwario/bch-gateway/pull/20

Signed-off-by: Josef Schlehofer <[email protected]>

bigclown-gateway: update to version 1.17.0

Release notes:
https://github.com/hardwario/bch-gateway/releases/tag/v1.17.0

Signed-off-by: Josef Schlehofer <[email protected]>

python-calver: update to version 2025.10.20

Fixes:
 SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!

        ********************************************************************************
        Please consider removing the following classifiers in favor of a SPDX license expression:

        License :: OSI Approved :: Apache Software License

        See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
        ********************************************************************************

!!
  self._finalize_license_expression()

Release notes:
https://github.com/di/calver/releases/tag/2025.10.20

Signed-off-by: Josef Schlehofer <[email protected]>

python-markupsafe: update to version 3.0.3

Release notes:
https://github.com/pallets/markupsafe/releases/tag/3.0.3

Signed-off-by: Josef Schlehofer <[email protected]>

python-wheel: update to 0.45.1

Release notes:
https://github.com/pypa/wheel/releases/tag/0.45.1

Signed-off-by: Josef Schlehofer <[email protected]>

python-cython: update to version 3.1.5

Fixes:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
   ^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
 ^^^^^^^^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
  ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'

Signed-off-by: Josef Schlehofer <[email protected]>

python-setuptools: update to version 80.9.0

Release notes:
https://setuptools.pypa.io/en/stable/history.html#v80-9-0

Signed-off-by: Josef Schlehofer <[email protected]>

python-uci: drop patches due to newer setuptools

These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <[email protected]>

python3: update to version 3.11.4

In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] https://redirect.github.com/buildroot/buildroot/commit/b37e4a5f56182c5b8e4ffce433eb652174a19da6
[2] https://peps.python.org/pep-0632/
[3] https://redirect.github.com/pypa/setuptools/commit/88eb8cc66f8762e37ec78913c07ccf3e3dba05e1

Signed-off-by: Josef Schlehofer <[email protected]>

umurmur: Use example config and add own init script

Files such as config file and init script related to OpenWrt
were removed in upstream [1]. Config file was same as umurmur.conf.example,
thus use it and init script, we need to ship our own. Add a simple one.

[1] https://github.com/umurmur/umurmur/commit/209edb5c887e5a5d3ab2c95ab4a8aeb8c1e6e8f3

Signed-off-by: Josef Schlehofer <[email protected]>

umurmur: move config file to its default location

This was changed in version 0.3.1 [1]

Fixes initial start of umurmur:
```
root@turris:~# umurmurd
Error in config file /etc/umurmur/umurmur.conf line 0: file I/O error
```

And also while running help of umurmurd, the defailt location is /etc/umurmur/umurmur.conf
```
Usage: umurmurd [-d] [-r] [-h] [-p <pidfile>] [-t] [-c <conf file>] [-a <addr>] [-b <port>]
       -c <conf file> - Specify configuration file (default /etc/umurmur/umurmur.conf)
```
[1] https://github.com/umurmur/umurmur/commit/4f3ed41357bb6fcb7afddd5343b59cfef54d65a4

Fixes: c4a23ca99662e67c8b6f5b8bad76d93fc2381ea0 ("umurmur: update to version 0.3.1")
Signed-off-by: Josef Schlehofer <[email protected]>

docker-compose: Update to version 2.40.3

Release notes:
https://github.com/docker/compose/releases/tag/v2.40.3

Signed-off-by: Javier Marcet <[email protected]>

adguardhome: bump to 0.107.69

Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.68
Changelog: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.69
Signed-off-by: George Sapkin <[email protected]>

snapcast: remove leftover "libavahi-client" dependency

With "-DBUILD_WITH_AVAHI=OFF" the "libavahi-client" dependency is not
needed anymore. Instead, the "libexpat" dependency needs to be specified
explicitly.

Fixes: a9ac8666da5f ("snapcast: fix PulseAudio")
Fixes: eeb8d131fc93 ("snapcast: add package snapserver and snapclient")
Signed-off-by: Szabolcs Hubai <[email protected]>

snapcast: show snapweb placeholder

snapserver has a built-in webserver which is able to host a web player:
snapweb. [1]
It is accessible at http://snapserver:1780/ but with enabled "doc_root"
setting and with missing directory the browser shows an empty page
with a message: "The resource '/' was not found."

Fix this with disabling the "doc_root" setting in "/etc/snapserver.conf"
This "doc_root" was enabled and set to "/usr/share/snapserver/snapweb"
in upstream commit fcbe40585875 ("Install snapweb") [2], back in 2020
and released in v0.21.0 of Snapcast.

This was reported in an upstream discussion by Robert Muth. [3]

[1]: https://github.com/badaix/snapweb
[2]: https://github.com/badaix/snapcast/commit/fcbe405858752457a67006eeff4f0da60e8fbc89
[3]: https://github.com/badaix/snapcast/discussions/1417#discussioncomment-14480178

Fixes: eeb8d131fc9 ("snapcast: add package snapserver and snapclient")
Signed-off-by: Szabolcs Hubai <[email protected]>

rclone: Update to 1.71.2

Release note: https://github.com/rclone/rclone/releases/tag/v1.71.2

Signed-off-by: Tianling Shen <[email protected]>

syslog-ng: add dependency for ivykis

Replace embedded ivykis with a separate package to improve
dependency management and enable library reuse.

The ivykis library now properly supports io_uring when
CONFIG_KERNEL_IO_URING is enabled.

Signed-off-by: Josef Schlehofer <[email protected]>

ivykis: add new package

Libivykis, an asynchronous I/O readiness notification library.
This library is required by syslog-ng and potentially other packages
that need event-driven I/O handling.

Signed-off-by: Josef Schlehofer <[email protected]>

tailscale: update to 1.90.2

Changelog: https://tailscale.com/changelog#2025-10-23
Changelog: https://tailscale.com/changelog#2025-10-24

Signed-off-by: Sandro Jäckel <[email protected]>

docker-compose: Update to version 2.40.2

Release notes:
https://github.com/docker/compose/releases/tag/v2.40.2

Signed-off-by: Javier Marcet <[email protected]>

python-build: update to version 1.3.0

Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <[email protected]>

python-flit-core: update to version 3.12.0

Release notes:
https://github.com/pypa/flit/blob/5714d1f78fb9b344c997cb866c44bb9506b8ca41/doc/history.rst#version-312

Signed-off-by: Josef Schlehofer <[email protected]>

avahi: fix implementation of avahi user

All avahi subpackages should run the daemon as a dedicated user insteead
of as the nobody user. This is helpful in troubleshooting and better for
security and to help avoid resource conflicts.

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc (avahi-dbus-daemon)

Signed-off-by: John Audia <[email protected]>

xl2tpd: add UCI support

This adds UCI support for xl2tpd. To maintain backward compatibility, I
have introduced the config option “use_legacy_config,” which is enabled
by default.

If you want to use the UCI config, you must disable or delete this
option.

Signed-off-by: Martin Schiller <[email protected]>

xl2tpd: add support to set own hostname in proto handler

This is needed if the peer only allows certain hostnames to connect.

Signed-off-by: Martin Schiller <[email protected]>

kea: update to 3.0.1

Requires conversion to meson.

Unfortunately, upstream needlessly relies on cc.run() to figure out
various things instead of cc.compile(). Requires massive patch.

Signed-off-by: Rosen Penev <[email protected]>

php8: update to 8.4.14

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.4.14

Signed-off-by: Michael Heimpold <[email protected]>

nfs-kernel-server: disable kerberos and ldap

Some targets are failing due likely to build order issues suggested by
Daniel[1] so disable these two options for the v4 package.

Example:
make[4]: Leaving directory '/builder/shared-workdir/build/sdk/build_dir/target-aarch64_cortex-a53_musl/nfs-utils-2.8.4'
Package nfs-kernel-server-v4 is missing dependencies for the following libraries:
libgssapi_krb5.so.2
libldap.so.2

1. https://github.com/openwrt/packages/pull/27150#issuecomment-3446589119

Signed-off-by: John Audia <[email protected]>

flent: update to 2.2.0

Release Notes:
https://github.com/tohojo/flent/releases/tag/v2.2.0

Signed-off-by: Nick Hainke <[email protected]>

open-vm-tools: update to 13.0.0

for detailed change log, please refer to:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog

Signed-off-by: Tan Zien <[email protected]>

cqueues: lua-5.3, 5.4 variants

Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <[email protected]>

luaossl: lua-5.3, 5.4 variants

Build upstream's support for lua 5.3 and 5.4

Signed-off-by: Nathaniel Wesley Filardo <[email protected]>

qemu: update to 10.1.0

- Update to 10.1.0
- Refresh patches
- Disable DBUS Display #27036

Signed-off-by: Vladimir Ermakov <[email protected]>

postgresql: fix fails to start on mounted data directories

This commit resolves a bug where the PostgreSQL service failed to start
during the boot process when its data directory ($pgdata) was on a
partition mounted via `/etc/fstab`.
Because the filesystem is already mounted, no hotplug event is ever
triggered, and the PostgreSQL service mistakenly waits for an event
that will never happen.
This fix adds a check to ensure the script does not skip starting the
service if the data directory is on a mount point.

Signed-off-by: Peiying Huang <[email protected]>

domoticz: update to 2025.2 and add jwt-cpp dependency

Version 2025.2 (October 13th 2025)
- Implemented: EnergyDashboard, add option for (Outside) Temperature Sensor
- Implemented: Enever, Added Pure Energy, removed obsolete providers
- Implemented: Enphase, display a error is a IQ inverter has not been received for more then a day
- Implemented: Kodi, support for 'tvshow' type
- Implemented: MQTT-AD, added support for Climate action_template/state
- Implemented: MQTT-AD, added support for IR Blaster (Tuya iH-F8260)
- Implemented: MQTT-AD, handling battery low boolean sensors
- Implemented: MQTT-AD, allow publishing messages
- Implemented: P1 Chart, Report: Added Total Column (Usage-Return)
- Implemented: Rain Rate notification
- Implemented: Support for Humidity only graph
- Fixed: MQTT-AD, fix issue where brightness and RGB command topic are different
- Fixed: MQTT-AD, preserve select options when updating a device
- Fixed: Replace device now also copies 'Options' field
- Changed: Enphase query Token method
- Changed: mDNS, hostname now lowercase
- Changed: MQTT-AD, added support for color_temp_command_template
- Changed: TADO, Added fixed API endpoint
- Changed: TADO, Add poll interval option
- Changed: MQTT, not publishing devices that are not used
- Changed: Philips Hue now uses HTTPS to be compliant with new Hue Bridge
- Fixed: mDNS, possible crash when web server (non) SSL was disabled, or a invalid port was specified
- Fixed: Charts, after deleting a datapoint, the browser was not correctly refreshed
- Updated: Windows libraries

Version 2025.1 (May 5th 2025)
- Implemented: Battery level for Setpoint sensors
- Implemented: Charts, zoom option for 'Day' view
- Implemented: Data Pushers, added P1 actual value
- Implemented: EnOcean, now able to choose an optional base_id as sender_id instead of the chip_id (#6213)
- Implemented: Floorplan, Add support for stop button (Ventation blinds)
- Implemented: RFXCom, Updated SDK
- Implemented: Support for Honeywell Series 5/PIR
- Implemented: Text sensor, now posible to edit direct from the GUI
- Implemented: YouLess, added Water meter
- Implemented: More default icons
- Implemented: MQTT-AD, added support for Gas device class
- Implemented: MQTT-AD, added support for Text device class
- Implemented: MQTT-AD, better precision for kWh sensors
- Implemented: MQTT-AD, enabled 'device_automation' component to be compatible with upcoming (2025) Zigbee2MQTT version
- Implemented: MQTT-AD, handling single onoff color mode as a normal light/switch
- Implemented: MQTT-AD, power sensors for the Tuya SPM02
- Implemented: MQTT-AD, support sensors that report humidity but sends 'null' values
- Implemented: MQTT-AD, support for string field state objects
- Implemented: MQTT Push 'Retained' mode option
- Implemented: Rain devices can now be replacement with different types of rain devices
- Implemented: RFXCom, Falmec Support
- Implemented: RTL433, Support Generic Switch (Door) sensor
- Implemented: Tado, oauth2 support
- Changed: dzVents, possible to pass a Domoticz device ID in notify() through the extra parameter
- Changed: Energy Dashboard now also available for non-admin users
- Changed: Energy Dashboard, Text object clipping rectangle
- Changed: Google Firebase Cloud Messaging (FCM) alternative way to pass a Domoticz device ID through the extra field ('|Device=<devidx>')
- Changed: Internal webserver refactoring
- Changed: Netatmo Improved and automated login process for devices (to obtain client ID and Password with user selectable scopes)
- Changed: Removed Highcharts 'Download PNG/JPG/SVG' buttons until export server is fixed
- Changed: Using OpenStreetMap for Latitude/Longitude query in settings
- Changed: Hardware/User/Application/Variables setup page (update/delete/add buttons)
- Changed: Smoke Detectors are now able (internally) to use keep-alive timestamps
- Fixed: Application shutdown, solved possible crash (#6310)
- Fixed: AtagOne, fixed getting device_id and better debuginfo
- Fixed: Charts, dynamic title based on selected range
- Fixed: Computed Meter summation
- Fixed: Custom Icons, making sure they are valid and loaded OK
- Fixed: Floorplan, corrected open/close icon behaviour
- Fixed: Floorplan, now handles protected selectors
- Fixed: MQTT Push, making sure direct push is working
- Fixed: Possible mutex lock issue when logging
- Fixed: Pushers, corrected Gas value rounding
- Fixed: Python framework, invalid sValue when creating a General/kWh sensor
- Fixed: RFXCom 868 MHz Weather device
- Fixed: RFXCom, WS90 Weather device
- Removed: Thermosmart thermostat (Product no longer supported/available by the manufacturer)
- Removed: API: Old RType calls have been replaced
- Updated: HighCharts
- Updated: Self Signed Certificate (Valid till 2035)
- Updated: Translations

Version 2024.7 (July 13th 2024)
- Implemented: P1 Meter, Report, Header now also supports simple mode (No T1/T2/R1/R2 but just total)
- Fixed: Google Cloud Messaging (GCM/FCM) possible crash when notification needed to be send

Version 2024.6 (July 8th 2024)
- Fixed: EventSystem, LOG_FORCE now always logged
- Changed: Google Cloud Messaging (GCM) now uses the new v1 API of Google's Firebase Cloud Messaging (FCM)

Version 2024.5 (July 7th 2024)
- Implemented: Currency Symbol in Location Settings
- Implemented: dzVents, Added historical data helper 'med' to calculate the median value
- Implemented: dzVents, Improved logging
- Implemented: Energy Dashboard
- Implemented: Enever, Added Budget Energy and Eneco
- Implemented: Enphase, Live storage data
- Implemented: Enphase, Option for more Inverter details (ac/dc voltage, temperature, lastupdate)
- Implemented: Event Editor, Close/Close All menu dropdown
- Implemented: Event Editor, Storing/Loading opened events
- Implemented: Hour chart for P1 log
- Implemented: MQTT-AD Climate Fan Mode
- Implemented: MQTT-AD Climate Swing Mode
- Implemented: OpenWeatherMap, API 3.0 support
- Implemented: P1 Meter, option to specify view (low/high tariff or simple (dynamic contract))
- Implemented: Possible to query a range of device states via JSON
- Implemented: SolarEdge, polling Storage devices
- Fixed: Data Pushers, Forecast for Weather Station subtypes
- Fixed: Floorplan, better detection of switches
- Fixed: Hardware Setup, hiding extra parameters when selecting a python plugin
- Fixed: PythonEx framework, two notifications where send for switch type devices
- Fixed: Python framework, custom image loading
- Removed: Cereal Proxy (not used anymore)
- Changed: EvoHome, now making use of general logging system
- Changed: MQTT-AD, now also handles brightness scale number values as string
- Changed: SBFSpot, disabled error 28 error
- Changed: Selector switch now displays correct state in Data field (and devices overview)

Version 2024.4 (January 30th 2024)
- Fixed: cWebm, fixing high CPU load caused by time jumps
- Fixed: Memory leak in master/client setup
- Fixed: Python, device creation with options was not working correctly
- Fixed: Room Selection, switching to default room did not always work
- Fixed: Temperature compare chart for Fahrenheit

Version 2024.3 (January 24th 2024)
- Implemented: Domoticz Remote Server, added better error message if remote Domoticz device could not be created because accepting new devices is disabled under settings
- Implemented: InfluxDB Data push, add error message when return status code is forbidden
- Fixed: Alert sensor notification
- Fixed: Scripts/Lua/Blockly, setting a setPoint

Version 2024.2 (January 15th 2024)
- Implemented: Compare chart for most sensor types
- Implemented: Email, Splitting mime attachments over multiple lines
- Implemented: Notifications, Option to enable/disable
- Implemented: OpenZwave is back.... (No Support)
- Updated: Translations
- Changed: Comparing charts now uses correct Y-Axis label
- Changed: Internal, Last received is now handled differently, should solve possible hardware timeout issues
- Changed: MQTT, QoS is now set to 1 for all messages
- Fixed: MQTT-AD: Fan creation
- Fixed: Timer Plans, now also duplicates scenes

Version 2024.1 (January 1th 2024)
- Implemented: AlfenEve, added charging indication switch
- Implemented: AlfenEve, added option to specify charge current (or disable this)
- Implemented: AlfenEve, added Solar charging mode and settings
- Implemented: Counter report, now possible to remove data point (via shift click) from month chart
- Implemented: Devices overview, Setpoint log button
- Implemented: Enever, added support for providers Atoom Alliantie, Energie van Ons, Vandebron, Wout Energie
- Implemented: Enever, option to specify different providers for Gas/Electricity
- Implemented: Enever: added two user variables for average gas/electricity price
- Implemented: Enphase, counter helper to prevent turnover caused by powerloss, reboot or other envoy issues
- Implemented: Enphase, Initial support for Encharge battery status (needs more work)
- Implemented: Livesearch, included hardware name and optimized search algorithm to search all entered strings
- Implemented: Managed Counters, now possible to use negative values
- Implemented: Mitsubishi WF RAC Airconditioning
- Implemented: MQTT-AD, added support for climate min_temp/max_temp and temp_step
- Implemented: MQTT-AD, added support for number voc type
- Implemented: MQTT-AD, added support for Wh and Wm sensors
- Implemented: MQTT-AD, don't add new devices when this is disabled in the system
- Implemented: MQTT-AD: Fan percentage_command_template merged with preset_modes
- Implemented: MQTT, added option to specify devices to be published to MQTT
- Implemented: P1 Meter report, now possible to remove data point (via shift click) from month chart
- Implemented: Persistent Timers (will work in all timer plans)
- Implemented: SetPoint devices can now be configured with a custom unit, min/max and step size and have a custom icon
- Implemented: Support for Python 3.12
- Implemented: TeleInfo, added Tempo field
- Implemented: Temp/Hum/Baro or combination can be replaced by any other Temp/Hum/Baro or combination
- Implemented: Temperature report, now possible to remove data point (via shift click) from variation chart
- Changed: Floorplan, better display of current state for counter devices
- Changed: Floorplan, Sound Icon state (0 dB = Off else On)
- Changed: MQTT-AD: better device name generation
- Changed: Netatmo login, now using the API Token
- Fixed: EventSystem, corrected event of RGB/W/WW devices
- Fixed: Export to csv from Charts
- Fixed: MQTT-AD, RGB dimmers did not work correctly in scenes/timers
- Fixed: MQTT-AD: better handling of Push-On/Push-Off devices
- Fixed: MQTT-AD: better handling of Switch commands that needs a 'state' object
- Fixed: MQTT-AD: fixed brightness for HS lights
- Fixed: MQTT-AD: prevent blind from updating on non-numeric state changes
- Fixed: P1 Meter, buffer size increased because of large datagrams on some meters
- Fixed: Python memory leak
- Fixed: Sunset/rise timers now correctly set the time for next day
- Fixed: Switches defined with "Off Delay" are not set to "Off" at startup
- Removed: OpenZWave (Move to ZWaveJS-UI in combination with MQTT Auto Discovery)
- Removed: RFXCom, firmware update via web interface (use RFXFlash instead)

Signed-off-by: David Woodhouse <[email protected]>

uradvd: implement test.sh

to verify the version emitted by uradvd is not empty.

Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: update to r26-1e64364d

The OpenWrt package will not provide the correct version information
but the date of the last git commit
in order to ease packaging following the discussions in #27482 and #27614.

Co-authored-by: Nora Matthias Schiffer <[email protected]>
Co-authored-by: Moritz Warning <[email protected]>
Signed-off-by: Jan-Niklas Burfeind <[email protected]>

uradvd: use INSTALL_CONF for confguration

instead of INSTALL_DATA.

Co-authored-by: Josef Schlehofer <[email protected]>
Signed-off-by: Jan-Niklas Burfeind <[email protected]>

digitemp: fix compilation with gcc15

Upstream backports.

Move away from codeload. Local tar archives are smaller.

Add missing PKG_LICENSE_FILES.

Signed-off-by: Rosen Penev <[email protected]>

libmpeg2: fix compilation with gcc15

Need a GNU_LIBRARY define for getopt.

Updated URL from a dead one.

Minor fixes.

Signed-off-by: Rosen Penev <[email protected]>

csshnpd: bump to c1.0.17 release

Upstream release aligned to Mbed-TLS 3.6.5

Signed-off-by: Chris Swan <[email protected]>

yt-dlp: bump to 2025.10.22

Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.10.14
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.10.22
Signed-off-by: George Sapkin <[email protected]>

ripgrep: bump to 15.0.0

release notes:
https://github.com/BurntSushi/ripgrep/releases/tag/15.0.0

patch dropped - integrated upstream.

Signed-off-by: Paul Donald <[email protected]>

sing-box: update to 1.12.11

changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.12.11

Signed-off-by: Gregory Gullin <[email protected]>

owut: update to 2025.10.24

Bug fixes:
    efahl/owut@07453922aa2f owut: create uclient singleton to minimize memory usage
    efahl/owut@f0735878918c owut: fix bug in version number parsing

Signed-off-by: Eric Fahlgren <[email protected]>

ddns-script: removes linefeed which causes 401 err

The linefeed at the end causes ovh-api to return 401 even if the
password is correct.

Fixes #27693

Signed-off-by: Fabian Zimmermann <[email protected]>

bind: bump to 9.20.15

Fixes the following security issues:

- CVE-2025-8677: DNSSEC validation fails if matching but invalid
  DNSKEY is found.
- CVE-2025-40778 Address various spoofing attacks.
- CVE-2025-40780 Cache-poisoning due to weak pseudo-random number
  generator.

The complete list of changes from version 9.20.11 is available in the
upstream changelog at
https://ftp.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <[email protected]>

travelmate: update 2.2.1-3

- fix minor log issues
- restore old, efficient log viewer (in LuCI)

Signed-off-by: Dirk Brenken <[email protected]>